diff --git a/.github/workflows/openapi-diff.yml b/.github/workflows/openapi-diff.yml
index 4e35211e22..15e296c2b3 100644
--- a/.github/workflows/openapi-diff.yml
+++ b/.github/workflows/openapi-diff.yml
@@ -34,14 +34,14 @@ jobs:
           >> $GITHUB_OUTPUT
       - name: Find existing comment
         id: find_comment
-        uses: peter-evans/find-comment@v3
+        uses: peter-evans/find-comment@3eae4d37986fb5a8592848f6a574fdf654e61f9e # v3
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
           repository: ${{ github.repository }}
           issue-number: ${{ github.event.pull_request.number }}
           body-includes: "## OpenAPI Changes"
       - name: Post changes as comment
-        uses: peter-evans/create-or-update-comment@v3
+        uses: peter-evans/create-or-update-comment@23ff15729ef2fc348714a3bb66d2f655ca9066f2 # v3
         # Even if no changes, make sure to update old comment if it was found.
         if: steps.oasdif_summary.outputs.summary || steps.find_comment.outputs.comment-id
         with: